<!DOCTYPE html
  PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
  "DTD/xhtml1-strict.dtd">
<html>
  <head>
    <title>volatility.plugins.gui.win32k_core : API documentation</title>
    <meta content="text/html;charset=utf-8" http-equiv="Content-Type" />
    <link href="apidocs.css" type="text/css" rel="stylesheet" />
    
    
  </head>
  <body>
    <h1 class="module">v.p.g.win32k_core : module documentation</h1>
    <p>
      <span id="part">Part of <a href="volatility.html">volatility</a>.<a href="volatility.plugins.html">plugins</a>.<a href="volatility.plugins.gui.html">gui</a></span>
      
      
    </p>
    <div>
      
    </div>
    <div class="undocumented">No module docstring</div>

    
    
    <div id="splitTables">
      <table class="children sortable" id="id363">
  
  
<tr class="class">
    
    
    <td>Class</td>
    <td><a href="volatility.plugins.gui.win32k_core.tagSHAREDINFO.html">tagSHAREDINFO</a></td>
    <td><span>A class for shared info blocks</span></td>
  </tr><tr class="class">
    
    
    <td>Class</td>
    <td><a href="volatility.plugins.gui.win32k_core.tagWINDOWSTATION.html">tagWINDOWSTATION</a></td>
    <td><span>A class for Windowstation objects</span></td>
  </tr><tr class="class">
    
    
    <td>Class</td>
    <td><a href="volatility.plugins.gui.win32k_core.tagDESKTOP.html">tagDESKTOP</a></td>
    <td><span>A class for Desktop objects</span></td>
  </tr><tr class="class">
    
    
    <td>Class</td>
    <td><a href="volatility.plugins.gui.win32k_core.tagWND.html">tagWND</a></td>
    <td><span>A class for window structures</span></td>
  </tr><tr class="class">
    
    
    <td>Class</td>
    <td><a href="volatility.plugins.gui.win32k_core.tagRECT.html">tagRECT</a></td>
    <td><span>A class for window rects</span></td>
  </tr><tr class="class">
    
    
    <td>Class</td>
    <td><a href="volatility.plugins.gui.win32k_core.tagCLIPDATA.html">tagCLIPDATA</a></td>
    <td><span>A class for clipboard objects</span></td>
  </tr><tr class="class">
    
    
    <td>Class</td>
    <td><a href="volatility.plugins.gui.win32k_core.tagTHREADINFO.html">tagTHREADINFO</a></td>
    <td><span>A class for thread information objects</span></td>
  </tr><tr class="class">
    
    
    <td>Class</td>
    <td><a href="volatility.plugins.gui.win32k_core.tagHOOK.html">tagHOOK</a></td>
    <td><span>A class for message hooks</span></td>
  </tr><tr class="class">
    
    
    <td>Class</td>
    <td><a href="volatility.plugins.gui.win32k_core.tagEVENTHOOK.html">tagEVENTHOOK</a></td>
    <td><span>A class for event hooks</span></td>
  </tr><tr class="class">
    
    
    <td>Class</td>
    <td><a href="volatility.plugins.gui.win32k_core.Win32KCoreClasses.html">Win32KCoreClasses</a></td>
    <td><span>Apply the core object classes</span></td>
  </tr><tr class="class">
    
    
    <td>Class</td>
    <td><a href="volatility.plugins.gui.win32k_core.Win32KGahtiVType.html">Win32KGahtiVType</a></td>
    <td><span>Apply a vtype for win32k!gahti. Adjust the number of handles according to the OS version</span></td>
  </tr><tr class="class">
    
    
    <td>Class</td>
    <td><a href="volatility.plugins.gui.win32k_core.AtomTablex86Overlay.html">AtomTablex86Overlay</a></td>
    <td><span>Apply the atom table overlays for all x86 Windows</span></td>
  </tr><tr class="class">
    
    
    <td>Class</td>
    <td><a href="volatility.plugins.gui.win32k_core.AtomTablex64Overlay.html">AtomTablex64Overlay</a></td>
    <td><span>Apply the atom table overlays for all x64 Windows</span></td>
  </tr><tr class="class">
    
    
    <td>Class</td>
    <td><a href="volatility.plugins.gui.win32k_core.XP2003x86TimerVType.html">XP2003x86TimerVType</a></td>
    <td><span>Apply the tagTIMER for XP and 2003 x86</span></td>
  </tr><tr class="class">
    
    
    <td>Class</td>
    <td><a href="volatility.plugins.gui.win32k_core.XP2003x64TimerVType.html">XP2003x64TimerVType</a></td>
    <td><span>Apply the tagTIMER for XP and 2003 x64</span></td>
  </tr><tr class="class">
    
    
    <td>Class</td>
    <td><a href="volatility.plugins.gui.win32k_core.Win32Kx86VTypes.html">Win32Kx86VTypes</a></td>
    <td><span>Applies to all x86 windows profiles.</span></td>
  </tr><tr class="class">
    
    
    <td>Class</td>
    <td><a href="volatility.plugins.gui.win32k_core.Win32Kx64VTypes.html">Win32Kx64VTypes</a></td>
    <td><span>Applies to all x64 windows profiles.</span></td>
  </tr><tr class="class">
    
    
    <td>Class</td>
    <td><a href="volatility.plugins.gui.win32k_core.XPx86SessionOverlay.html">XPx86SessionOverlay</a></td>
    <td><span>Apply the ResidentProcessCount overlay for x86 XP session spaces</span></td>
  </tr><tr class="class private">
    
    
    <td>Class</td>
    <td><a href="volatility.plugins.gui.win32k_core._MM_SESSION_SPACE.html">_MM_SESSION_SPACE</a></td>
    <td><span>A class for session spaces</span></td>
  </tr><tr class="class private">
    
    
    <td>Class</td>
    <td><a href="volatility.plugins.gui.win32k_core._HANDLEENTRY.html">_HANDLEENTRY</a></td>
    <td><span>A for USER handle entries</span></td>
  </tr><tr class="class private">
    
    
    <td>Class</td>
    <td><a href="volatility.plugins.gui.win32k_core._RTL_ATOM_TABLE.html">_RTL_ATOM_TABLE</a></td>
    <td><span>A class for atom tables</span></td>
  </tr><tr class="class private">
    
    
    <td>Class</td>
    <td><a href="volatility.plugins.gui.win32k_core._RTL_ATOM_TABLE_ENTRY.html">_RTL_ATOM_TABLE_ENTRY</a></td>
    <td><span>A class for atom table entries</span></td>
  </tr>
  
</table>
      
      
    </div>
    
    
    

    
    <address>
      <a href="index.html">API Documentation</a> for Volatility 2.2, generated by <a href="http://codespeak.net/~mwh/pydoctor/">pydoctor</a> at 2013-06-24 15:16:10.
    </address>
  </body>
</html>